| 摘要: |
| 重新评估了Zodiac 算法抗不可能差分攻击和积分攻击的能力.已有结果显示,Zodiac 算法存在15 轮不可能差分和8 轮积分区分器.首先得到了算法概率为1 的8 轮截断差分,以此构造了Zodiac 算法完整16 轮不可能差分和9 轮积分区分器.利用9 轮积分区分器,对不同轮数Zodiac 算法实施了积分攻击,对12 轮、13 轮、14 轮、15 轮和16 轮Zodiac 的攻击复杂度分别为234, 259, 293, 2133 和2190 次加密运算,选择明文数均不超过16.结果表明,完整16 轮192 比特密钥的Zodiac 算法也是不抗积分攻击的. |
| 关键词: Zodiac 不可能差分 截断差分 积分攻击 |
| DOI：10.3724/SP.J.1001.2011.03875 |
| 分类号: |
| 基金项目:国家自然科学基金(60803156, 61070215); 信息安全国家重点实验室开放基金(01-07, 01-02-5) |
|
| Impossible Differential and Integral Cryptanalysis of Zodiac |
|
SUN Bing1, SUN Bing1, SUN Bing1,2
|
|
1.Department of Mathematics and Systems Science, College of Science, National University of Defense Technology, Changsha 410073, China;2.State Key Laboratory of Information Security, Institute of Software, The Chinese Academy of Sciences, Beijing 100190, China
|
| Abstract: |
| This paper reevaluates the security of Zodiac against impossible differential and integral attacks. In the past, results have shown that there are 15-round impossible differentials and 8-round integral distinguishers of Zodiac. Based on an 8-round truncated differential, with probability being 1, full 16-round impossible differentials and 9-round integral distinguishers are constructed. Integral attacks are applied to 12/13/14/15/16-round Zodiac with time complexities being 234, 259, 293, 2133 and 2190, respectively. Both the numbers of chosen plaintexts are no more than 216, which shows that the full 16-round Zodiac is not immune to integral attack. |
| Key words: Zodiac impossible differential truncated differential integral attack |
